Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- May 19, 2025
Malicious code in api-tecnisa (npm)
- May 19, 2025
Malware in vtex.google-tag-manager
1 compromised version
- May 19, 2025
Malware in api-tecnisa
1 compromised version
- May 19, 2025
Malware in internallib_v473
1 compromised version
- May 19, 2025
Malicious code in hakai-xss (npm)
4 compromised versions
- May 19, 2025
Malware in hakai-xss
1 compromised version
- May 19, 2025
Malware in @wf-wfria/pioneer-core
1 compromised version
- May 19, 2025
Malware in @wf-wfria/ria-analytics
1 compromised version
- May 19, 2025
Malicious code in untitled_flourish_template (npm)
1 compromised version
- May 19, 2025
Malicious code in ttd-lithium (npm)
2 compromised versions
- May 19, 2025
Malicious code in trend-panel (npm)
1 compromised version
- May 19, 2025
Malware in trend-panel
1 compromised version
- May 19, 2025
Malware in ttd-lithium
1 compromised version
- May 19, 2025
Malware in untitled_flourish_template
1 compromised version
- May 19, 2025
Malicious code in wdpr-ra-javascript-native-bridge (npm)
3 compromised versions
- May 19, 2025
Malware in wdpr-ra-javascript-native-bridge
1 compromised version
- May 19, 2025
Malicious code in grunt-mrg-enb-autoconf (npm)
4 compromised versions
- May 19, 2025
Malicious code in grunt-autogen-bemdecl (npm)
3 compromised versions
- May 19, 2025
Malware in grunt-mrg-enb-autoconf
1 compromised version
- May 19, 2025
Malware in grunt-autogen-bemdecl
1 compromised version
- May 19, 2025
Malicious code in feast-polyfill (npm)
4 compromised versions
- May 19, 2025
Malicious code in act1on3-package (npm)
- May 19, 2025
Malware in act1on3-package
1 compromised version
- May 19, 2025
Malware in feast-polyfill
1 compromised version
- May 19, 2025
Malicious code in vee-validate-latest (npm)
1 compromised version
- May 19, 2025
Malicious code in sc5 (npm)
1 compromised version
- May 19, 2025
Malicious code in mp-cross (npm)
2 compromised versions
- May 19, 2025
Malicious code in ing-lib-investments (npm)
1 compromised version
- May 19, 2025
Malicious code in ing-lib-hybrid-advice (npm)
1 compromised version
- May 19, 2025
Malicious code in ing-it-web (npm)
1 compromised version
- May 19, 2025
Malicious code in ing-feat-transaction (npm)
1 compromised version
- May 19, 2025
Malicious code in ing-feat-payment-request (npm)
1 compromised version
- May 19, 2025
Malicious code in ing-feat-order-overview (npm)
1 compromised version
- May 19, 2025
Malicious code in ing-feat-loans-simulator (npm)
1 compromised version
- May 19, 2025
Malicious code in ing-feat-external-agreement (npm)
- May 19, 2025
Malicious code in angular-monash (npm)
- May 19, 2025
Malware in ing-feat-payment-request
1 compromised version
- May 19, 2025
Malware in ing-it-web
1 compromised version
- May 19, 2025
Malware in ing-lib-hybrid-advice
1 compromised version
- May 19, 2025
Malware in angular-monash
1 compromised version
- May 19, 2025
Malware in ing-feat-order-overview
1 compromised version
- May 19, 2025
Malware in ing-feat-loans-simulator
1 compromised version
- May 19, 2025
Malware in vee-validate-latest
1 compromised version
- May 19, 2025
Malware in ing-lib-investments
1 compromised version
- May 19, 2025
Malware in ing-feat-external-agreement
1 compromised version
- May 19, 2025
Malware in ing-feat-transaction
1 compromised version
- May 19, 2025
Malware in sc5
1 compromised version
- May 19, 2025
Malware in mp-cross
1 compromised version
- May 19, 2025
Malicious code in shopify-variants (npm)
- May 19, 2025
Malicious code in affirmv2 (npm)
Page 5878 of 6,634